summary refs log tree commit diff stats
path: root/include/migration/qemu-file.h
diff options
context:
space:
mode:
authorDaniel P. Berrange <berrange@redhat.com>2016-04-27 11:05:15 +0100
committerAmit Shah <amit.shah@redhat.com>2016-05-26 11:32:10 +0530
commit69ef1f36b0f882fc5ba9491fb272fa5f83ac1d3d (patch)
tree3c5250b754f77bdc0b87be419034570084fd128f /include/migration/qemu-file.h
parent2594f56d4c7ef621da5d0c21921f8fda32025623 (diff)
downloadfocaccia-qemu-69ef1f36b0f882fc5ba9491fb272fa5f83ac1d3d.tar.gz
focaccia-qemu-69ef1f36b0f882fc5ba9491fb272fa5f83ac1d3d.zip
migration: define 'tls-creds' and 'tls-hostname' migration parameters
Define two new migration parameters to be used with TLS encryption.
The 'tls-creds' parameter provides the ID of an instance of the
'tls-creds' object type, or rather a subclass such as 'tls-creds-x509'.
Providing these credentials will enable use of TLS on the migration
data stream.

If using x509 certificates, together with a migration URI that does
not include a hostname, the 'tls-hostname' parameter provides the
hostname to use when verifying the server's x509 certificate. This
allows TLS to be used in combination with fd: and exec: protocols
where a TCP connection is established by a 3rd party outside of
QEMU.

NB, this requires changing the migrate_set_parameter method in the
HMP to accept a 's' (string) value instead of 'i' (integer). This
is backwards compatible, because the parsing of strings allows the
quotes to be optional, thus any integer is also a valid string.

Reviewed-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
Message-Id: <1461751518-12128-26-git-send-email-berrange@redhat.com>
Signed-off-by: Amit Shah <amit.shah@redhat.com>
Diffstat (limited to 'include/migration/qemu-file.h')
0 files changed, 0 insertions, 0 deletions